On Sep 30, 2010, at 12:14, David Evans wrote: > It appears that the deluge-torrent.org prematurely published a copy of 1.3.0 > on their site and later retracted > it, substituting a different file with the same version number. > Unfortunately, the deluge port was > updated to 1.3.0 while the old file still existed.
So this is a "stealth update". See the FAQ: http://trac.macports.org/wiki/FAQ#checksums > I agree that the new version is probably legitimate but there is difficulty > in verifying the checksums as > you have stated. > > In addition, the earlier version of the file is cached on the macports own > mirrors so the port will fetch > a different version of the file depending on which site it thinks is closer. > In my case, I always get > it from distfiles.macports.org, which is geographically closer to me than the > OSU site. So the checksums > pass. > > So a question for the more knowledgable is how to purge the old file from the > macports mirrors > and/or under which circumstances it will be automatically updated. We don't purge files from our mirrors; files stay there forever. The port must handle the stealth update by using a different dist_subdir. See PortfileRecipes: http://trac.macports.org/wiki/PortfileRecipes#stealth-updates _______________________________________________ macports-users mailing list [email protected] http://lists.macosforge.org/mailman/listinfo.cgi/macports-users
